$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/61731640-5c09-3c09-a962-0cd9bcfdf6ab.roa File: 61731640-5c09-3c09-a962-0cd9bcfdf6ab.roa (raw, json) Hash identifier: AiItlPvH6ZsNg9sCgLoFNJx76vr/ZrEQbF4y2GAkX2E= Subject key identifier: 45:7A:A9:F0:21:48:79:CE:D8:00:EE:AC:63:D8:38:3A:79:E0:C4:C3 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AC0164D177EEA03FB5236C000 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/61731640-5c09-3c09-a962-0cd9bcfdf6ab.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 8069 IP address blocks: 20.33.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:4d:17:7e:ea:03:fb:52:36:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=e7794a18-aab4-4ae5-aafe-0f950684782c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b9:e0:eb:a7:95:22:bf:a6:81:08:3f:d4:20: ff:70:c7:f7:88:45:d6:b0:b3:b5:cc:84:68:48:e9: 4a:e2:ed:e2:86:7d:59:fb:31:f9:cf:bc:3c:4f:fc: d9:9c:79:26:54:1a:2c:f7:55:9c:2e:ca:8e:69:97: 55:4d:38:9d:63:ac:cd:0a:76:a4:65:e3:c9:e0:7b: b6:47:b3:08:25:48:14:3c:1c:9b:19:a7:41:f2:6b: 27:0b:e1:57:8d:7a:da:64:57:50:fd:79:bb:0e:27: 2c:69:6a:c0:00:13:65:bd:ed:33:af:42:e7:58:21: 7c:76:fa:05:cc:94:9e:33:21:64:b4:de:e7:11:aa: 99:4f:37:3c:f1:e8:14:91:88:80:bf:84:c0:80:f1: f7:f5:7a:fc:25:c4:f2:67:0f:e5:76:40:8e:e2:3a: dd:d4:f0:ed:8c:e3:c4:1c:74:7a:6d:3c:c8:a7:e8: c5:45:d0:2d:0b:00:25:e9:86:a1:98:99:fa:a5:0c: 0a:55:8e:e1:a1:05:ae:db:d2:01:72:b9:e6:0b:52: 87:f6:5a:64:e0:3c:4a:d3:34:08:ef:1a:71:9e:d4: 0e:4c:fd:28:a0:3b:f5:9c:21:59:fc:fa:1f:8d:bb: 5f:3a:30:42:f8:af:78:6f:fd:fc:d9:1c:b9:5a:08: 5f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7A:A9:F0:21:48:79:CE:D8:00:EE:AC:63:D8:38:3A:79:E0:C4:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/61731640-5c09-3c09-a962-0cd9bcfdf6ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:87:44:e7:b9:32:92:65:1a:e7:9b:92:99:f4:63:f4:1f:ff: 1e:78:b7:45:2d:fe:ab:c1:6e:64:af:20:20:76:04:f8:5a:7f: c0:13:46:05:ef:52:90:85:01:23:43:f5:13:c2:75:fd:e6:a8: 55:d7:9e:68:92:45:ed:3c:20:18:7c:a6:da:72:3f:09:63:35: 98:10:6f:39:2e:7a:76:0f:03:45:54:1f:42:c0:21:97:17:3f: 05:24:c5:60:ac:75:a3:fa:0d:c6:fa:4b:e0:20:09:af:c2:08: b8:18:37:05:48:53:6b:b1:42:51:58:55:8c:91:90:11:13:3c: 7e:a2:74:a8:56:30:42:01:48:5f:79:80:25:0e:48:2a:8e:89: 22:42:13:47:9c:46:fb:55:1e:b5:9a:b4:e6:32:92:94:7a:30: bb:a0:e0:60:eb:37:8f:0f:77:11:d6:23:b9:ed:56:71:b6:23: 03:8e:e2:97:b0:bf:cb:3e:9e:26:c1:85:66:37:f7:5f:46:a7: 44:37:2b:f8:d1:3c:55:84:e2:e5:d2:f2:e6:4a:d7:0f:aa:95: 2a:d4:c5:4b:08:de:06:70:f9:a5:7c:3f:d1:4f:72:88:57:b0: a1:7c:e3:03:43:92:89:ac:c4:7c:3c:23:01:46:c7:3a:1c:5e: b7:dc:9e:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFk0XfuoD+1I2wAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk ZTc3OTRhMTgtYWFiNC00YWU1LWFhZmUtMGY5NTA2ODQ3ODJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7ng66eVIr+mgQg/1CD/cMf3iEXWsLO1zIRo SOlK4u3ihn1Z+zH5z7w8T/zZnHkmVBos91WcLsqOaZdVTTidY6zNCnakZePJ4Hu2 R7MIJUgUPBybGadB8msnC+FXjXraZFdQ/Xm7DicsaWrAABNlve0zr0LnWCF8dvoF zJSeMyFktN7nEaqZTzc88egUkYiAv4TAgPH39Xr8JcTyZw/ldkCO4jrd1PDtjOPE HHR6bTzIp+jFRdAtCwAl6YahmJn6pQwKVY7hoQWu29IBcrnmC1KH9lpk4DxK0zQI 7xpxntQOTP0ooDv1nCFZ/PofjbtfOjBC+K94b/382Ry5WghfBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEV6qfAhSHnO2ADurGPYODp54MTDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjE3MzE2NDAtNWMwOS0z YzA5LWE5NjItMGNkOWJjZmRmNmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOHROe5MpJlGuebkpn0Y/Qf/x54t0Ut/qvBbmSvICB2BPhaf8ATRgXv UpCFASND9RPCdf3mqFXXnmiSRe08IBh8ptpyPwljNZgQbzkuenYPA0VUH0LAIZcX PwUkxWCsdaP6Dcb6S+AgCa/CCLgYNwVIU2uxQlFYVYyRkBETPH6idKhWMEIBSF95 gCUOSCqOiSJCE0ecRvtVHrWatOYykpR6MLug4GDrN48PdxHWI7ntVnG2IwOO4pew v8s+nibBhWY3919Gp0Q3K/jRPFWE4uXS8uZK1w+qlSrUxUsI3gZw+aV8P9FPcohX sKF84wNDkomsxHw8IwFGxzocXrfcnk0= -----END CERTIFICATE-----Generated at Sun Aug 24 08:41:56 2025 by rpki-client